Privacy policy
This Privacy Policy explains how MOVE & PLAY s.r.o. collects and uses personal data when you visit moveandplay.eu or contact us through this website, and what rights you have over that data under Regulation (EU) 2016/679 (the “GDPR”).
Who we are
The controller of your personal data — meaning the company that decides why and how it is processed — is:
MOVE & PLAY s.r.o.
Grösslingova ul. 4
811 09 Bratislava
Slovakia
Email: info@moveandplay.eu
We handle privacy questions ourselves. If you have a question about this policy, or you want to exercise any of the rights described below, write to us at the email address above.
What data we collect
Data you give us
When you send us a message using the contact form, we collect your first name, last name, email address and telephone number, the content of your message, and the date and time you sent it. All of these fields are required, because we need them to identify you and reply.
Data collected automatically
As with any website, our server receives certain technical data each time a page is requested: your IP address, your browser and operating system, the page you asked for and the page you came from.
We use your IP address to work out your approximate country. This lookup happens on our own server, against a database stored locally — your IP address is not sent to any third party for this purpose, and it is not saved in our database.
Cookies
We also use cookies and similar technologies, described in their own section below.
We do not operate customer accounts on this website, so we hold no login details, addresses or payment data for visitors.
Why we use it
Purpose | Legal basis |
|---|---|
Replying to your enquiry and any correspondence that follows | Performance of a contract, or steps taken before entering into one — Article 6(1)(b). Where no contract is contemplated, our legitimate interest in answering you — Article 6(1)(f) |
Running the website and its basic functions, such as your session, the security token that validates forms, and remembering your cookie choice | Our legitimate interest in providing a website that works — Article 6(1)(f) |
Keeping the website secure and protecting the contact form from automated abuse | Our legitimate interest in the security and availability of the website — Article 6(1)(f) |
Measuring how the website is used, so we can improve it | Your consent — Article 6(1)(a) |
Advertising, and measuring how our advertising performs | Your consent — Article 6(1)(a) |
You are under no obligation to give us any personal data. Without the details in the contact form, however, we cannot answer your enquiry.
Cookies and analytics
The first time you open this website you are asked which categories of cookies you accept. Before you choose, only the necessary category is active: nothing that requires consent is loaded until you give it. You can change or withdraw your choice at any time using the cookie settings button in the corner of every page.
There are four categories, matching the choices in that panel: necessary, analytics, advertising and personalisation. The last three are switched off unless you turn them on.
For analytics we use Google Analytics 4 and Google Tag Manager, provided by Google Ireland Limited. These are governed by Google Consent Mode: until you consent, every analytics and advertising storage signal is set to “denied”. We use the resulting statistics to understand how the site is used, not to identify you.
The contact form is protected by Cloudflare Turnstile, provided by Cloudflare, Inc., which checks that a form is being submitted by a person and not by an automated script. It belongs to the necessary category because the form cannot be submitted without it.
Necessary cookies
Cookie | Purpose | Expiry |
|---|---|---|
moveandplay_session | Maintains your session while you browse | 7 days |
XSRF-TOKEN | Security token that protects form submissions against cross-site request forgery | 7 days |
moveandplay_consent | Remembers the cookie choice you made, so you are not asked again | 180 days |
Cookies that need your consent
Cookie | Purpose | Expiry |
|---|---|---|
_ga | Google Analytics — distinguishes one visitor from another | 400 days |
_ga_* | Google Analytics — keeps the state of your visit | 400 days |
_gcl_au | Google Ads — measures advertising conversions | 90 days |
test_cookie | Google — checks whether your browser accepts cookies at all | 15 minutes |
You can also block or delete cookies in your browser settings. Blocking the necessary cookies will stop parts of the website working, including the contact form.
How long we keep it
Contact form messages — up to three years after our last exchange with you, so that we can follow up and deal with any related claim. We delete them sooner on request, unless we are required to keep them.
Cookies — for the periods in the tables above, or until you delete them.
Server logs — for the short period needed to investigate faults and security incidents, after which they are deleted or overwritten.
Who we share it with
We do not sell your personal data, and we do not pass it to anyone for their own purposes. We do rely on a small number of service providers who process data on our behalf, under contracts that oblige them to act only on our instructions:
the provider that hosts this website and its database for us;
Mailgun, which delivers the notification email the contact form generates;
Google Ireland Limited, for Google Analytics and Google Tag Manager, where you have consented;
Cloudflare, Inc., for the anti-spam check on the contact form.
We may also disclose data where the law requires it, or where it is necessary to establish, exercise or defend a legal claim.
Transfers outside the EU
Some of the providers above are established in, or may process data from, countries outside the European Economic Area — in particular the United States. Where that happens the transfer is covered by the European Commission’s Standard Contractual Clauses and, where it applies, by the provider’s certification under the EU–US Data Privacy Framework, alongside additional technical and organisational safeguards. Write to us if you would like details of the safeguards that apply to a particular provider.
Your rights
Under the GDPR you have the right to:
access your personal data and get a copy of it (Article 15);
have inaccurate data corrected, and incomplete data completed (Article 16);
have your data erased where one of the grounds in Article 17 applies;
restrict how we process your data in the situations listed in Article 18;
receive your data in a portable, machine-readable form, or have it sent to another controller (Article 20);
object to processing we base on our legitimate interests (Article 21);
withdraw your consent at any time and without giving a reason (Article 7(3)). Withdrawing it does not affect processing already carried out lawfully beforehand. For cookies, it is enough to reopen the cookie settings and switch a category off.
To exercise any of these rights, write to info@moveandplay.eu. We will reply within one month. If a request is complex we may extend that by up to two further months, and we will tell you if we do.
We do not take decisions about you by automated means alone, and we do not carry out profiling that would have legal effects for you.
If you believe we are handling your data unlawfully, you can also complain to the Slovak supervisory authority:
Úrad na ochranu osobných údajov Slovenskej republiky
Hraničná 12, 820 07 Bratislava 27, Slovakia
dataprotection.gov.sk
Children
This website is aimed at businesses and adult visitors. We do not knowingly collect personal data from children under 16. If you believe a child has sent us personal data, contact us and we will delete it.
Security
We protect your data with measures appropriate to the risk, including an encrypted connection (HTTPS) across the whole website, access controls on the systems that hold the data, and limiting access to the people who need it. No transmission over the internet is ever completely secure, so we cannot guarantee absolute security.
Changes to this policy
We may update this policy as the website or the law changes. The current version is always the one published on this page, and the date below tells you when it last changed.
Last updated: 11 August 2026